The macro may be obfuscated (e.g., string concatenation, base64 encoding) to evade signature‑based detection, which is typical for later variants.